180k Impacted by Data Breach at Michigan Healthcare Organization

Cherry Health says the personal information of over 180,000 individuals was stolen in a ransomware attack.

Michigan healthcare organization Cherry Street Services (Cherry Health) has started notifying over 180,000 individuals that their personal information was compromised in a ransomware attack.

The incident occurred on December 21, 2023, and resulted in the disruption of certain systems, suggesting that file-encrypting ransomware might have been involved.

Cherry Health initially disclosed the attack in early January, and announced in a February update that patients’ personal information had been compromised.

In a filing with the Maine Attorney General’s Office this week, the organization confirmed that ransomware was involved in the attack and revealed that approximately 184,000 individuals were affected by the incident.

“We took steps to determine the types of information that were at risk and the individuals to whom it pertained. On March 25, 2024, this process was completed, and ...